Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: E9QtL6YZPWRKX5OLT+v6NH7roYv+4UIYAzyWQZhoFIs=
Subject key identifier: 77:AD:C4:D4:EF:CB:42:EF:C7:EB:93:D8:53:01:8B:FD:D6:04:32:33
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019D9C99FBDEA01345B9106BA2D93460890F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 18:00:30 +0000
Manifest this update: Fri 17 Apr 2026 18:00:30 +0000
Manifest next update: Sat 18 Apr 2026 18:00:30 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: Grj7xkKYU2Dnz3xq47JQlS7cZ7ux9qe9ZmjQOdx3b2c=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:fb:de:a0:13:45:b9:10:6b:a2:d9:34:60:89:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Apr 17 18:00:30 2026 GMT
Not After : Apr 18 18:00:30 2026 GMT
Subject: CN=77adc4d4efcb42efc7eb93d853018bfdd6043233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:b3:d6:69:02:f3:ad:4f:2e:6d:fc:6d:16:
f4:e2:c5:f5:5c:58:ec:18:90:22:5f:e1:bb:aa:a7:
4b:10:72:b8:74:c3:11:03:64:9d:d3:6f:5a:9d:c1:
d3:ba:e2:f6:fe:fb:6e:00:ad:80:5a:59:a2:7a:0b:
0a:31:c9:60:b3:d8:ea:99:0e:ca:70:9c:4a:11:64:
11:2d:a9:ba:1c:c1:5f:57:63:a6:67:b0:21:5c:34:
98:d2:dc:e1:33:d9:91:e9:0d:b2:16:fc:e8:19:91:
66:5e:03:65:c9:38:cf:0e:20:6a:92:85:95:bc:f3:
80:13:32:ec:12:46:14:77:6a:52:b3:63:7b:a4:78:
27:af:da:eb:67:57:80:39:0c:34:49:4d:12:7b:8c:
fa:1e:11:32:f3:cc:1d:63:d4:45:9d:2c:c1:6a:2b:
04:3c:a2:73:79:50:7d:10:e0:07:8a:b9:7a:4f:7f:
68:14:a9:be:89:15:16:24:ec:37:3e:1d:17:4c:a2:
50:02:b6:f5:77:6e:f7:2d:bb:1d:81:ac:f6:56:15:
6b:c8:2c:4f:ea:d2:bd:36:39:80:5b:5c:c7:78:4e:
26:32:f0:21:14:6b:fd:1d:79:89:e2:34:4f:51:0e:
c3:cc:84:62:c1:31:ad:f4:3a:65:a4:89:33:92:8c:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AD:C4:D4:EF:CB:42:EF:C7:EB:93:D8:53:01:8B:FD:D6:04:32:33
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e1:8c:90:a7:33:8d:18:dc:f1:29:31:2d:45:55:e1:32:2b:
c6:c9:28:ef:f7:8e:ad:85:9e:5e:89:4e:ed:51:1a:01:48:be:
34:ec:c0:fd:64:7e:69:d3:3a:14:4e:07:92:5c:2c:22:84:63:
3e:c9:20:55:37:95:82:a2:f4:4a:2e:d8:82:d1:57:1b:97:fa:
34:00:2c:0a:98:c6:93:02:2d:44:17:48:35:11:10:93:e2:77:
3d:c6:77:cf:73:44:6b:7f:65:a7:2c:9a:d7:25:3c:9b:7b:ee:
d4:07:65:fc:4b:57:ba:36:44:43:f9:4d:2d:37:87:40:df:23:
1c:c9:ca:a5:92:64:39:9f:db:16:d3:f8:00:17:0b:3c:d8:1f:
95:fc:74:8d:27:37:4f:2f:ab:ee:74:12:7f:97:c1:74:bb:d5:
47:c5:c1:fc:5a:4f:da:44:d1:ea:08:3c:43:57:60:95:06:6f:
49:2d:3b:fe:94:08:2c:c3:cd:cd:06:ca:01:67:1b:96:a7:5a:
8c:72:e0:03:56:36:06:30:9e:a3:35:b1:dc:41:0d:ff:ab:d6:
59:46:44:60:61:5f:5d:8f:b9:f3:9e:82:40:4d:95:68:16:34:
3a:b4:0b:96:be:00:81:6b:85:f6:3b:fa:f2:d3:35:da:a4:8c:
93:bd:56:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:30 2026 by rpki-client